Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
File:                     UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft (raw, json)
Hash identifier:          CAnFBERUhF0e3cBjjkt0N6AGJ5SGF4cLBd6aeVud68o=
Subject key identifier:   56:5E:2A:44:2F:AF:B5:3D:B6:5A:77:A2:D9:6F:08:FB:B4:B7:DC:CA
Authority key identifier: 50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5
Certificate issuer:       /CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
Certificate serial:       0195C91A4276FA5897FA51159DF9005296C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
Manifest number:          101E
Signing time:             Mon 24 Mar 2025 17:01:36 +0000
Manifest this update:     Mon 24 Mar 2025 17:01:36 +0000
Manifest next update:     Tue 25 Mar 2025 17:01:36 +0000
Files and hashes:         1: UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl (hash: Gmw/yh/2Z3vo24XUlQIFU7pdtYEl3d9A2f52q1lja4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c9:1a:42:76:fa:58:97:fa:51:15:9d:f9:00:52:96:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
        Validity
            Not Before: Mar 24 17:01:36 2025 GMT
            Not After : Mar 25 17:01:36 2025 GMT
        Subject: CN=565e2a442fafb53db65a77a2d96f08fbb4b7dcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:a1:e3:b4:59:97:ef:7b:55:fb:12:64:19:
                    0f:f1:ef:91:98:ad:ab:41:9c:51:e3:26:43:f0:41:
                    d0:e8:76:4f:fa:19:d2:77:23:b4:22:c7:c4:f6:a4:
                    36:ac:a9:0f:b8:09:30:c8:f7:60:6c:aa:2d:b6:a3:
                    4e:87:38:c8:be:48:ee:5e:e3:f4:3c:ed:c6:f5:0b:
                    1f:09:c3:37:f5:c7:5b:0b:0b:ae:2b:c1:e9:f9:40:
                    2b:1d:4c:8f:b3:25:ed:e6:73:d8:f2:c3:a5:d6:f2:
                    68:4c:b7:db:ee:3e:dd:3a:c9:aa:61:fb:aa:40:d3:
                    7a:6a:8d:25:03:f6:f9:08:c5:a7:31:72:43:2c:63:
                    0a:82:94:b4:b3:4a:df:c8:62:f1:8d:ce:c9:17:45:
                    75:27:62:af:75:67:14:1d:d8:8d:8d:07:ed:b0:4f:
                    82:54:b3:37:3b:74:4d:fd:53:bc:92:c6:9c:aa:33:
                    88:1f:3a:02:64:69:b6:da:01:84:e6:6f:3e:0c:4e:
                    c1:b3:fc:5b:73:31:53:c7:28:14:2e:3d:ab:3f:f2:
                    b3:5c:38:26:f8:cd:6d:84:c6:fd:7c:d8:70:4f:f9:
                    48:1c:03:e5:10:61:ad:dc:63:e2:16:8b:c4:b5:ad:
                    b6:be:c7:70:64:a4:ad:87:a0:ec:1d:e9:d7:57:24:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:2A:44:2F:AF:B5:3D:B6:5A:77:A2:D9:6F:08:FB:B4:B7:DC:CA
            X509v3 Authority Key Identifier:
                keyid:50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:5c:15:cc:7e:1c:3c:4d:18:77:5a:e4:6a:73:75:bc:5e:
         0c:a6:f5:7b:1a:b5:a2:e3:5b:56:d7:0a:0f:1e:d0:83:4f:f3:
         a3:6f:cb:f2:1f:95:9e:98:51:3b:bd:5b:0c:cd:6e:49:75:56:
         fe:76:7d:d7:aa:c1:05:26:7c:7a:a0:c7:73:9b:28:89:cf:a9:
         b0:42:f3:21:00:f1:2c:b5:ad:34:7e:90:43:3f:40:b7:4e:68:
         01:29:0e:20:13:d4:eb:9d:ef:44:d4:1f:73:2b:4f:8e:08:3d:
         40:43:78:f0:11:2d:53:ca:c6:a7:7c:f0:61:8d:2c:e2:ee:c1:
         98:f0:a5:10:2b:c2:72:97:d5:12:d8:ec:7b:e9:95:ee:4a:a4:
         6b:6b:42:fa:a5:9e:09:19:26:3b:a2:15:b8:ee:5f:47:1b:bc:
         95:79:d8:17:1d:79:e8:8d:6c:68:40:07:68:f2:26:1a:fe:92:
         52:23:2f:ab:95:98:fb:16:10:53:44:07:58:a7:01:82:57:b4:
         26:ac:75:33:36:4d:0c:1f:0b:1b:96:a1:89:67:e0:4d:c4:d4:
         b3:11:b4:1d:7a:36:95:ad:66:55:5a:14:14:9a:67:60:b4:94:
         2f:01:77:53:9f:06:86:2c:83:d5:00:83:10:55:49:95:ae:ff:
         58:93:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----